$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer File: A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer (raw, json) Hash identifier: HA85xJVdAOP5qBWJAI7oRKEP/IknzvMAsoCPt1SWeqw= Subject key identifier: A1:1E:0A:62:38:26:E2:7C:F2:FC:29:CB:9B:01:08:FC:2D:1A:D0:0D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 35AD12FC10EFACA0194ECA40B2D7ECB25C7746A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:30:13 +0000 Certificate not after: Sun 02 May 2027 01:35:13 +0000 Subordinate resources: IP: 103.160.94.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ad:12:fc:10:ef:ac:a0:19:4e:ca:40:b2:d7:ec:b2:5c:77:46:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:30:13 2026 GMT Not After : May 2 01:35:13 2027 GMT Subject: CN=A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:27:f0:ce:1c:68:14:f7:a9:14:68:d8:6c:96: 0e:f4:a0:da:dc:57:c4:82:55:10:2d:e1:27:db:5c: 7c:2a:b5:9b:7b:fd:04:3a:1e:e1:a8:c5:01:8f:69: a1:4d:2f:f7:a2:da:e3:3e:48:1a:fb:28:91:dc:b1: a5:0f:ba:d1:db:c6:7f:00:cf:a9:f2:cc:7f:56:b2: bd:88:eb:58:ae:05:c9:47:e1:40:d4:a3:f9:73:1c: 3d:94:58:ec:d1:56:04:cd:58:9b:fd:1a:6f:e3:b9: e8:d1:10:f3:fb:20:e7:5f:38:27:10:9d:68:66:92: fc:a3:9f:8a:92:53:f6:80:d2:de:df:e0:45:bb:1b: de:da:e8:61:fd:75:71:e8:c4:f9:88:02:9b:b7:94: 9c:f3:7d:45:21:9c:62:ac:1d:07:98:11:cb:1e:94: 53:c6:38:04:83:67:d9:22:82:10:ef:49:3d:58:e8: 4e:e3:7e:1b:b0:fa:6f:84:79:fc:b2:eb:01:a0:9b: 83:bc:29:41:45:0c:cd:7c:10:12:97:f9:ce:77:66: 08:67:5e:8a:96:9b:6b:5a:8d:bc:ed:c9:d6:33:13: 05:37:98:19:20:a9:af:c8:81:29:67:2e:d2:29:25: 62:6c:c8:87:af:c7:1c:86:1d:0b:c9:bc:c1:f1:2e: e6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A1:1E:0A:62:38:26:E2:7C:F2:FC:29:CB:9B:01:08:FC:2D:1A:D0:0D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.94.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:c9:64:3b:64:d1:c8:7d:59:4a:ca:23:3a:c7:9d:64:14:aa: c8:f0:6c:c6:78:e2:2a:39:ef:53:39:e8:25:94:9d:b9:4a:f5: f0:93:fe:f7:c3:00:e8:4b:f7:1c:25:62:32:11:56:d9:e1:c6: 99:bb:62:72:bc:61:65:72:4d:a4:b2:ea:bf:a9:ff:6e:c4:1f: ec:ef:92:35:b3:ca:76:a9:0b:00:23:ff:12:26:6e:0b:27:ab: 68:41:f8:ca:85:f2:ab:b2:e3:e9:ef:96:d6:5c:82:f8:36:9c: a7:5a:c8:2f:65:43:b0:59:c7:6f:45:dd:3f:ad:80:70:e4:68: e8:7f:33:4d:2e:56:06:40:6c:96:35:26:70:21:62:9f:f5:b8: 92:a8:cf:91:76:82:f7:10:2a:b4:2f:26:cf:06:31:37:9d:fd: a6:8b:d6:7d:ee:84:2d:68:f7:9e:87:72:b4:0b:c6:68:db:43: f6:2f:65:2b:88:8b:5b:c9:93:5d:87:68:4d:97:59:64:a3:21: 16:79:ec:b4:4b:d2:96:bf:28:12:09:8e:43:a1:a3:b9:0c:b5: 1e:61:3a:aa:76:6e:18:66:3b:cc:76:d2:b2:37:1d:1f:c5:82: 0c:4f:09:c4:4b:3d:2f:7e:56:da:47:fd:ee:bf:f7:6b:38:93: fa:c1:3e:80 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUNa0S/BDvrKAZTspAstfsslx3RqUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzAxM1oX DTI3MDUwMjAxMzUxM1owMzExMC8GA1UEAxMoQTExRTBBNjIzODI2RTI3Q0YyRkMy OUNCOUIwMTA4RkMyRDFBRDAwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMn8M4caBT3qRRo2GyWDvSg2txXxIJVEC3hJ9tcfCq1m3v9BDoe4ajFAY9p oU0v96La4z5IGvsokdyxpQ+60dvGfwDPqfLMf1ayvYjrWK4FyUfhQNSj+XMcPZRY 7NFWBM1Ym/0ab+O56NEQ8/sg5184JxCdaGaS/KOfipJT9oDS3t/gRbsb3troYf11 cejE+YgCm7eUnPN9RSGcYqwdB5gRyx6UU8Y4BINn2SKCEO9JPVjoTuN+G7D6b4R5 /LLrAaCbg7wpQUUMzXwQEpf5zndmCGdeipaba1qNvO3J1jMTBTeYGSCpr8iBKWcu 0iklYmzIh6/HHIYdC8m8wfEu5okCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKEeCmI4JuJ88vwpy5sBCPwtGtANMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E1OWU1NjU4LWFiMTAtNDI5Ny05MmY0LWY2YTI2NjNlNTRjMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNTllNTY1 OC1hYjEwLTQyOTctOTJmNC1mNmEyNjYzZTU0YzAvMC9BMTFFMEE2MjM4MjZFMjdD RjJGQzI5Q0I5QjAxMDhGQzJEMUFEMDBELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6BeMA0GCSqGSIb3DQEBCwUAA4IBAQCNyWQ7ZNHIfVlKyiM6x51kFKrI8GzG eOIqOe9TOegllJ25SvXwk/73wwDoS/ccJWIyEVbZ4caZu2JyvGFlck2ksuq/qf9u xB/s75I1s8p2qQsAI/8SJm4LJ6toQfjKhfKrsuPp75bWXIL4NpynWsgvZUOwWcdv Rd0/rYBw5GjofzNNLlYGQGyWNSZwIWKf9biSqM+RdoL3ECq0LybPBjE3nf2mi9Z9 7oQtaPeeh3K0C8Zo20P2L2UriItbyZNdh2hNl1lkoyEWeey0S9KWvygSCY5DoaO5 DLUeYTqqdm4YZjvMdtKyNx0fxYIMTwnESz0vflbaR/3uv/drOJP6wT6A -----END CERTIFICATE-----Generated at Tue May 12 22:03:59 2026 by rpki-client